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SEMICONDUCTOR 
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SPECIAL FEATURES 

• 1,1 52-bit secure read/write, nonvolatile memory 

• Secure memory cannot be deciphered without match- 
ing 64-bit password 

• Memory is partitioned into 3 blocks of 384 bits each 

• 64-bit password and ID fields for each memory block 

• 512-bit scratchpad ensures data transfer integrity 

• Operating temperature range: -40°C to +70°C 

• Over 1 years of data retention 

COMMON iButton FEATURES 

• Unique, factory-lasered and tested 64-bit registra- 
tion number (8-bit family code + 48-bit serial number 
+ 8-bit CRC tester) assures absolute traceability 
because no two parts are alike 

• Multidrop controller for MicroLAN™ 

• Digital identification and information by momentary 
contact 

• Chip-based data carrier compactly stores Informa- 
tion 

• Data can be accessed while affixed to object 

• Economically communicates to bus master with a 
single digital signal at 16.3k bits per second 

•Standard 16 mm diameter and 1-Wlre protocol 

ensure compatibility with iButton family 

• Button shape is self-aligning with cup-shaped 
probes 

• Durable stainless steel case engraved with registra- 
tion number withstands harsh environments 

• Easily affixed with self-stick adhesive backing, 
latched by Its flange, or locked with a ring pressed 
onto its rim 

• Presence detector acknowledges when reader first 
applies voltage 

• Meets UL#913 (4th Edit.); Intrinsically Safe Appara- 
tus, Approved under Entity Concept for use in Class 
I, Division 1, Group A, B, C and D Locations 



F5 MICROCAN™ 

— ^ 5.89 U— 



DATA 




GROUND 



All dimensions shown in millimeters 

ORDERING INFORMATION 

DS1 991 L-F5 F5 MIcroCan 

EXAMPLES OF ACCESSORIES 

DS9096P Self-Stick Adhesive Pad 

DS9101 Multi-Purpose Clip 

DS9093RA Mounting Lock Ring 

DS9093F Snap-In Fob 

DS9092 iButton Probe 
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iButton DESCRIPTION 

The DS1991 MultiKey IButton is a rugged read/write 
data carrier that acts as tiiree separate eiectronic keys, 
offering 1 ,152 bits of secure, nonvoiatiie memory. Each 
l<ey is 384 bits long with distinct 64-bit password and 
public ID fields (Figure 1). The password field must be 
matched in order to access the secure memory. Data is 
transferred serially via the 1-Wire protocol, which 
requires only a single data lead and aground return. The 
512-bit scratchpad serves to ensure integrity of data 
transfers to secure memory. Data should first be written 
to the scratchpad where it can be read back. After the 
data has been verified, a copy scratchpad command will 
transfer the data to the secure memory. This process 
insures data integrity when modifying the memory. A 
48-bit serial number is factory lasered into each 
DS1991 to provide a guaranteed unique identity which 
allows for absolute traceability. The family code for the 
DS1991 is 02h. The durable MicroCan package is 
highly resistant to environmental hazards such as dirt, 
moisture and shock. Its compact button-shaped profile 
is self-aligning with mating receptacles, allowing the 
DS1991 to be easily used by human operators. Acces- 
sories permit the DS1991 to be mounted on plastic key 
fobs, photo-ID badges, printed-circuit boards or any 
smooth surface of an object. Applications include 
secure access control, debit tokens, work-in-progress 
tracking, electronic travelers and proprietary data. 

OPERATION 

The DS1 991 is accessed via a single data line using the 
1-Wire protocol. The bus master must first provide one 
of the four ROI\^ Function Commands, 1 ) Read ROM, 2) 
Match ROM, 3) Search ROM, 4) Skip ROM. These com- 
mands operate on the 64-bit lasered ROM portion of 
each device and can singulate a specific device if many 
are present on the 1-Wire line as well as indicate to the 
bus master how many and what types of devices are 
present. The protocol required for these ROM Function 
Commands is described in Figure 9. After a ROM Func- 
tion Command is successfully executed, the memory 
functions that operate on the secure memory and the 
scratchpad become accessible and the bus master may 
issue any one of the six Memory Function Commands 
specific to the DS1 991 . The protocol for these Memory 
Function Commands is described in Figure 5. All data is 
read and written least significant bit first. 



64-BIT LASERED ROM 

Each DS1991 contains a unique ROM code that Is 64 
bits long. The first eight bits are a 1-Wire family code. 
The next 48 bits are a unique serial number. The last 
eight bits are a CRC of the first 56 bits. (Figure 2.) 

The 1-Wire CRC is generated using a polynomial gen- 
erator consisting of a shift register and XOR gates as 
shown in Figure 3. The polynomial is 4- + X* + 1 . 
Additional information about the Dallas 1-Wire Cyclic 
Redundancy Check is available in the Book of DS1 9xx 
iButton Standards. 

The shift register bits are initialized to zero. Then start- 
ing with the least significant bit of the family code, one bit 
at a time is shifted in. After the 8th bit of the family code 
has been entered, then the serial number is entered. 
After the 48th bit of the serial number has been entered, 
the shift register contains the CRC value. Shifting in the 
eight bits of CRC should return the shift register to all 
zeros. 

MEMORY FUNCTION COMMANDS 

The DS1 991 has six device-specific commands. Three 
scratchpad commands: Write Scratchpad, Read 
Scratchpad and Copy Scratchpad and three subkey 
commands: Write Password, Write Subkey and Read 
Subkey. After the device is selected, the memory func- 
tion command is written to the DS1991 . The command 
is comprised of three fields, each one byte long. The first 
byte is the function code field. This field defines the six 
commands that can be executed. The second byte is 
the address field. The first six bits of this field define the 
starting address of the command. The last two bits of 
this field are the subkey address code. The third byte of 
the command is a complement of the second byte (Fig- 
ure 4). 

For the first use, since the passwords actually stored in 
the device are unknown, the DS1 991 needs to be initial- 
ized. This is done by directly writing (i.e., not through the 
scratchpad) the new identifier and password for the 
selected subkey using the Write Password command. 
As soon as the new identifier and password are stored in 
the device, further updates should be done through the 
scratchpad. 
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MEMORY MAP Figure 1 
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Each subkey or the scratchpad has its own unique address. 



64-BIT LASERED ROM Figure 2 



8-Bit CRC Code 
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IVISB 



LSB MSB 



LSB iVlSB 



LSB 



1-WIRE CRC GENERATOR Figure 3 
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DS1991 COMMAND STRUCTURE Figure 4 
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SCRATCHPAD COMMANDS 

The 64-byte read/write scratchpad of the DS1 991 is not 
password-protected. Its normal use is to build up a data 
structure to be verified and then copied to a secure sub- 
key. 

Write Scratchpad [96H] 

The Write Scratchpad command is used to enter data 
into the scratchpad. The starting address for the write 
sequence Is specified in the command. Data can be 

continuously written until the end of the scratchpad Is 
reached or until the DS1991 is reset. The command 
sequence is shown In Figure 5, first page, left column. 

Read Scratchpad [69H] 

The Read Scratchpad command Is used to retrieve data 
from the scratchpad. The starting address Is specified In 
the command word. Data can be continuously read until 
the end of the scratchpad is reached or until the DS1 991 
is reset. The command sequence is shown in Figure 5, 
first page, center column. 

Copy Scratchpad [3CH] 

The Copy Scratchpad command Is used to transfer spe- 
cified data blocks from the scratchpad to a selected sub- 
key. This command should be used when data verifica- 
tion Is required before storage in a secure subkey. Data 
can be transferred In single 8-byte blocks or In one large 
64-byte block. There are nine valid block selector 
codes that are used to specify which block Is to be trans- 



ferred (Figure 6). As a further precaution against acci- 
dental erasure of secure data, the 8-byte password of 
the destination subkey must be entered. If the password 
does not match, the operation Is terminated. After the 
block of data Is transferred to the secure subkey, the 
original data In the corresponding block of the scratch- 
pad Is erased. The command sequence Is shown In Fig- 
ure 5, first page, right column. 

SUBKEY COMMANDS 

Each of the subkeys within the DS1991 is accessed 
Individually. Transactions to read and write data to a 
secured subkey start at the address defined in the com- 
mand and proceed until the device is reset or the end of 
the subkey is reached. 

Write Password [5AH] 

The Write Password command Is used to enter the ID 
and password of the selected subkey. This command 
will erase all of the data stored in the secure area as well 
as overwriting the ID and password fields with the new 
data. The DS1991 has a built-in check to ensure that 
the proper subkey was selected. The sequence begins 
by reading the ID field of the selected subkey; the ID of 
the subkey to be changed Is then written into the part. If 
the IDs do not match, the sequence is terminated. 
Otherwise, the subkey contents are erased and 64 bits 
of new ID data are written followed by a new 64— bit 
password. The command sequence is shown in Figure 
5, 2nd page, right column. 
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MEMORY FUNCTIONS FLOW CHART Figure 5 
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MEMORY FUNCTIONS FLOW CHART (cont'd) Figure 5 
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BLOCK SELECTOR CODES OF THE DS1991 Figure 6 
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Write SubKey [99H] 

The Write Subkey command is used to enter data into 
the selected subkey. Since the subkeys are secure, the 
correct password is required to access them. The 
sequence begins by reading the iD fieid; the password 
is then written back, if the password is incorrect, the 
transaction is terminated. Otherwise, the data foiiowing 
is written into the secure area. The starting address for 
the write sequence is specified in the command word. 
Data can be continuously written until the end of the 
secure subkey is reached or untii the DS1 991 is reset. 
The command sequence is shown in Figure 5, 2nd 
page, center column. 

Read SubKey [66H] 

The Read Subkey command is used to retrieve data 
from the selected subkey. Since the subkeys are 
secure, the correct password is required to access 
them. The sequence begins by reading the ID field; the 
password is then written back. If the password is incor- 
rect, the DS1 991 will transmit random data. Othen/vise 
the data can be read from the subkey. The starting 
address is specified in the command. Data can be con- 
tinuously read untii the end of the subkey is reached or 
untii the DS1991 is reset. The command sequence is 
shown in Figure 5, 2nd page, left column. 



1-WIRE BUS SYSTEM 

The 1 -Wire bus is a system which has a single bus mas- 
ter and one or more slaves, in ail instances, the DS1 991 
is a slave device. The bus master is typically a micro- 
controller The discussion of this bus system is broken 
down into three topics: hardware configuration, transac- 



tion sequence, and 1-Wire signalling (signal types and 
timing). A 1-Wire protocol defines bus transactions in 
terms of the bus state during specified time slots that are 
initiated on the failing edge of sync pulses from the bus 
master. For a more detailed protocol description, refer to 
Chapter 4 of the Book of DS19xx iButton Standards. 

HARDWARE CONFIGURATION 

The 1-Wire bus has only a single line by definition; it is 
important that each device on the bus be able to drive it 
at the appropriate time. To facilitate this, each device 
attached to the 1-Wire bus must have an open drain 
connections or 3-state outputs. The DS1 991 is an open 
drain part with an internal circuit equivalent to that 
shown in Figure 7. The bus master can be the same 
equivalent circuit. If a bidirectional pin is not available, 
separate output and input pins can be tied together. 

The bus master requires a pull-up resistor at the master 
end of the bus, with the bus master circuit equivalent to 
the one shown in Figures 8a and 8b. The value of the 
pull-up resistor should be approximately 5 kI2 for short 
line lengths. 

A multidrop bus consists of a 1-Wire bus with multiple 
slaves attached. The 1-Wire bus has a maximum data 
rate of 16.3k bits per second. The idle state for the 
1-Wire bus is high. If, for any reason a transaction 
needs to be suspended, the bus MUST be left in the idle 
state if the transaction is to resume. If this does not 
occur, and the bus is left low for more than 1 20 (iS, one or 
more of the devices on the bus may be reset. 
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EQUIVALENT CIRCUIT Figure 7 

Rx 



Tx 



ioon 

MOSFET 



-• Data (Lid) 



500 kn 



V Ground (outer rim) 



BUS MASTER CIRCUIT Figure 8 



A) Open Drain 




B) Standard TIL 



. To data contact 
of DS1991 



BUS MASTER 



TTL-Equivalent 
Port Pins 



-^>o- 




To data contact 
of DS1991 



020698 8/14 



DS1991 



TRANSACTION SEQUENCE 

The protocol for accessing the DS1991 via the 1-Wire 
port is as follows: 

• Initialization 

• ROM Function Command 

• Memory Function Command 

• Transaction/Data 

INITIALIZATION 

All transactions on the 1-Wire bus begin with an initial- 
ization sequence. The initialization sequence consists 
of a reset pulse transmitted by the bus master followed 
by presence pulse{s) transmitted by the slave{s). 

The presence pulse lets the bus master know that the 
DS1 991 is on the bus and is ready to operate. For more 
details, see the "1-Wire Signalling" section 

ROM FUNCTION COMMANDS 

Once the bus master has detected a presence pulse, it 
can issue one of the four ROM function commands. All 
ROM function commands are eight bits long. A list of 
these commands follows (refer to flowchart in Figure 9). 

Read ROM [33H] 

This command allows the bus master to read the 
DS1 991 's 8-bit family code, unique 48-bit serial num- 
ber and 8-bit CRC. This command can be used only if 
there is a single DS1991 on the bus. If more than one 
slave is present on the bus, a data collision will occur 
when all slaves try to transmit at the same time (open 
drain will produce a wired-AND result). 

Match ROM [55H] 

The match ROM command, followed by a 64-bit ROM 
sequence, allows the bus master to address a specific 
DS1991 on a multidrop bus. Only the DS1991 that 
exactly matches the 64-bit ROM sequence will respond 
to the subsequent memory function command. All 
slaves that do not match the 64-bit ROM sequence will 
wait for a reset pulse. This command can be used with a 
single or multiple devices on the bus. 



Skip ROM [CCH] 

This command can save time in a single drop bus sys- 
tem by allowing the bus master to access the memory 
functions without providing the 64-bit ROM code. If 
more than one slave is present on the bus and a read 
command is issued following the Skip ROM command, 
data collision will occur on the bus as multiple slaves 
transmit simultaneously (open drain will produce a 
wired-AND result). 

Search ROM [FOH] 

When a system is Initially brought up, the bus master 
might not know the number of devices on the 1-Wire 
bus or their 64-bit ROM codes. The Search ROM com- 
mand allows the bus master to use a process of elimina- 
tion to identify the 64-bit ROM codes of all slave devices 
on the bus. The ROM search process is the repetition of 
a simple 3-step routine: read a bit, read the complement 
of the bit, then write the desired value of that bit. The bus 
master performs this simple 3-step routine on each bit 
of the ROM. After one complete pass, the bus master 
knows the contents of the ROM in one device. The 
remaining number of devices and their ROM codes may 
be identified by additional passes. See Chapter 5 of the 
Book of DS1 9xx jButton Standards for a comprehensive 
discussion of a search ROM, including an actual exam- 
ple. 

1-WIRE SIGNALLING 

The DS1991 requires strict protocols to insure data 
Integrity. The protocol consists of four types of signalling 
on one line: Reset Sequence with Reset Pulse and 
Presence Pulse, Write 0, Write 1 and Read Data. All 
these signals except presence pulse are initiated by the 
bus master. The initialization sequence required to 
begin any communication with the DS1 991 is shown in 
Figure 1 0. A reset pulse followed by a presence pulse 
indicates the DS1991 Is ready to send or receive data 
given the correct ROM command and memory function 
command. The bus master transmits (TX) a reset pulse 
(tRSTL. minimum 480 [is). The bus master then releases 
the line and goes into receive mode (RX). The 1-Wire 
bus is pulled to a high state via the pull-up resistor. After 
detecting the rising edge on the data pin, the DS1991 
waits (tpDH. 1 5-60 lis) and then transmits the presence 
pulse (tpDL, 60-240 |xs). 
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ROM FUNCTIONS FLOW CHART Figure 9 
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INITIALIZATION PROCEDURE "RESET AND PRESENCE PULSES" Figure 10 

MASTER Tx "RESET PULSE" I MASTER Rx "PRESENCE PULSE" 



,, VpuLLUP 
VpULLUP MIN 
V|H MIN 

V|L MAX 

ov 




RESISTOR 

MASTER 

DS1991 



480 ^^S < IrstL < oo * 

480 us < tRSTH < oo (includes recovery time) 
15 us < tpoH < 60 us 
60ns<tpDL< 240 ns 



* In order not to mask Interrupt signalling by other devices on the 1-Wire bus, tRsiL + tp should always be less than 
960 us. 



READ/WRITE TIME SLOTS 

The definitions of write and read time slots are illustrated 
in Figure 11. All time slots are initiated by the master 
driving the data line low. The falling edge of the data line 
synchronizes the DS1991 to the master by triggering a 
delay circuit in the DS1991 . During write time slots, the 



delay circuit determines when the DS1991 will sample 
the data line. For a read data time slot, if a "0" is to be 
transmitted, the delay circuit determines how long the 
DS1 991 will hold the data line low overriding the 1 gen- 
erated by the master. If the data bit is a "1 ", the iButton 
will leave the read data time slot unchanged. 



READ/WRITE TIMING DIAGRAM Figure 11 
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READ/WRITE TIMING DIAGRAM (cont'd) Figure 11 
Write-Zero Time Slot 
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PHYSICAL SPECIFICATIONS 

Size 
Weight 
Humidity 
Aititude 

Expected Service Life 
Safety 



ABSOLUTE MAXIMUM RATINGS* 

Voltage on any Pin Relative to Ground 
Operating Temperature 
Storage Temperature 



See mechanicai drawing 
3.3 grams (F5 package) 
90% RH at 50°C 
10,000 feet 

10 years at 25°C (150 miilion transactions, see note 4) 
IWIeets UL#913 (4tli Edit.); intrinsicaily Safe Apparatus, 
Approved under Entity Concept for use in Ciass i. Division 
1 , Group A, B, C and D Locations 

-0.5V to +7.0V 
-40°C to +70°C 
-40°C to +70°C 



This is a stress rating only and functional operation of the device at these or any other conditions above those 
indicated in the operation sections of this specification is not implied. Exposure to absolute maximum rating 
conditions for extended periods of time may affect reliability. 



DC ELECTRICAL CHARACTERISTICS 



(Vpup*=2.8V to 6.0V; ^0°C to +70°C) 



PARAMETER 


SYMBOL 


MIN 


TYP 


MAX 


UNITS 


NOTES 


input Logic Low 


V|L 


-0.3 




0.8 


V 


1 


input Logic High 


V|H 


2.2 




6.0 


V 




Output Logic Low @ 4 mA 


Vol 






0.4 


V 




Output Logic High 


Vqh 




Vpup 


6.0 


V 


1,2 


Input Resistance 


Ri 




500 




kQ. 


3 


* Vpyp = external pull-up voltage 














AC ELECTRICAL CHARACTERISTICS 








(-40°C to 70°C 


PARAMETER 


SYMBOL 


MIN 


TYP 


MAX 


UNITS 


NOTES 


Time Slot Period 


tSLOT 


60 




120 


US 




Write 1 Low Time 


tiowi 


1 




15 


|iS 




Write Low Time 


tLOWO 


60 




120 


^s 




Read Data Vaiid 


tRDV 


exactiy 1 5 


^ls 




Release Time 


tpELEASE 





15 


45 






Read Data Setup 


tsu 






1 


^S 


5 


Recovery Time 


tREC 


1 






^s 




Reset Low Time 


tpSTL 


480 






|IS 




Reset High Time 


Irsth 


480 






^ls 


4 


Presence Detect High 


tpDH 


15 




60 


|iS 




Presence Detect Low 


tpDL 


60 




240 


^s 
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NOTES: 

1 . All voltages are referenced to ground. 

2. Vpup - external pull-up voltage to system supply. 

3. Input pulldown resistance to ground. 

4. An additional reset or communication sequence cannot begin until the reset high time has expired. 

5. Read data setup time refers to the time the host must pull the 1-Wire bus low to read a bit. Data is guaranteed 
to be valid within 1 jis of this falling edge and will remain valid for 14 us minimum. (15 jis total from falling edge 
on 1-Wire bus.) 
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